PT-2025-36277 · Linux+8 · Linux Kernel+8
Published
2025-01-01
·
Updated
2026-05-22
·
CVE-2025-39682
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue in the TLS implementation related to handling zero-length records on the
rx list. Each recvmsg() call is designed to process either contiguous DATA records or a single non-DATA record. The code failed to correctly handle scenarios where a zero-length record was encountered after a zero-copy decryption, as the associated skb (socket buffer) was not available for queuing to the rx list. This could lead to unexpected behavior when processing subsequent records.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu